Riverside County Office of Education

Riverside County Office of Education notified parents of a data breach involving student information. The incident resulted from a global cybersecurity issue with Progress Software's MOVEit Transfer solution, where unauthorized actors exploited a previously unknown vulnerability. Between May 27 and May 31, 2023, an unauthorized third party obtained files containing student names, academic records, behavior information, enrollment data, special education details, disability codes, dates of birth, and demographic information. No Social Security numbers or financial data were involved. The district engaged cybersecurity experts, secured its MOVEit repository, reported to law enforcement, and offered one year of identity monitoring services to affected families.

Riverside County Office of Education reported a data breach affecting its MOVEit Transfer file transfer appliance. The incident occurred on May 27, 2023, due to a vulnerability in the Progress Software MOVEit product (supply chain compromise). The breach potentially exposed personal information including names, addresses, and possibly Social Security numbers of students, parents, and employees. The organization is notifying affected individuals as required by California law.

Illuminate Education, a technology provider for schools, disclosed unauthorized access to databases containing student information for Riverside County Office of Education and other clients. The breach occurred between Dec 28, 2021, and Jan 8, 2022, and was discovered on Jan 8, 2022. Affected data includes names and potentially other student records, but not SSNs or financial info. Illuminate engaged forensics, rotated credentials, and offered identity monitoring.